Behavioral task
behavioral1
Sample
cf6245e3240281a1c0d2ce991df6ca6c3c9ac06b34ca110ff2e56da91f94fbdc.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
cf6245e3240281a1c0d2ce991df6ca6c3c9ac06b34ca110ff2e56da91f94fbdc.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
cf6245e3240281a1c0d2ce991df6ca6c3c9ac06b34ca110ff2e56da91f94fbdc.elf
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
cf6245e3240281a1c0d2ce991df6ca6c3c9ac06b34ca110ff2e56da91f94fbdc.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
245edfe5fd9ed693f1b01f61dd5a5533.bin
-
Size
47KB
-
MD5
1c1780722d120f39098e59c6f6d3cac1
-
SHA1
309cafccd5df41a6103e02fab560a8c0d46a1716
-
SHA256
1deb1309368fac6fa8cb6e3696111b78ab6ed3f47440fdb4ef8d481b0c14e6ad
-
SHA512
b0adbde72208e666cc1e9de007ab05e7d79059619a44eae54d32ac295287839b8d66bba7f036e73ac56089198b06f386ca9ddc32f0e6a58c131f706294c9c0c3
-
SSDEEP
768:rL38QqXwmmQMEIkpU0cSvEdhaG2mN5fJLRXYEgoO4ZG+hPKx4dRqAu3+NvaUZMra:n/UzrICU0vg8GlfJLRHgoOD+5Kx3j3YF
Malware Config
Extracted
gafgyt
45.88.66.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/cf6245e3240281a1c0d2ce991df6ca6c3c9ac06b34ca110ff2e56da91f94fbdc.elf family_gafgyt -
Gafgyt family
Files
-
245edfe5fd9ed693f1b01f61dd5a5533.bin.zip
Password: infected
-
cf6245e3240281a1c0d2ce991df6ca6c3c9ac06b34ca110ff2e56da91f94fbdc.elf.elf linux sparc